This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/udm-0Xl3UglvtX_NHkrgYLZH0SE.roa File: udm-0Xl3UglvtX_NHkrgYLZH0SE.roa (raw, json) Hash identifier: WYCvnHc5H5Xz3d6/Kkp/D6s/RlGIj7T/WQo1xaUpk+c= Subject key identifier: B9:D9:BE:D1:79:77:52:09:6F:B5:7F:CD:1E:4A:E0:60:B6:47:D1:21 Certificate issuer: /CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03 Certificate serial: 019C250ACB4B2F15E540D65EB60B04436E04 Authority key identifier: 2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/udm-0Xl3UglvtX_NHkrgYLZH0SE.roa Signing time: Tue 03 Feb 2026 19:46:30 +0000 ROA not before: Tue 03 Feb 2026 19:46:30 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 19318 IP address blocks: 2a0a:8180:c8c4::/48 maxlen: 48 2a0a:8182:2a54::/48 maxlen: 48 2a0a:8184:cc3c::/48 maxlen: 48 2a0a:8186:85fa::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.mft rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:25:0a:cb:4b:2f:15:e5:40:d6:5e:b6:0b:04:43:6e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a489e93dcbd870e9c2149bca34189fb4a95ac03 Validity Not Before: Feb 3 19:46:30 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=b9d9bed1797752096fb57fcd1e4ae060b647d121 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:57:a4:f9:51:d5:ca:f7:38:10:72:2d:99:1e: 2b:06:53:ed:dd:a0:a1:fe:52:50:25:b0:9a:d0:6e: 68:a1:31:45:a9:dc:bb:c6:3b:c1:7d:5a:d6:bb:12: 3a:23:87:1b:5e:be:66:05:c8:c9:90:a2:f1:87:ed: 1e:89:53:1a:e0:db:c7:28:d1:7e:17:a0:91:50:c5: 64:de:f0:77:3d:f5:e0:62:78:4a:3d:db:eb:c8:e2: b9:8d:5e:49:ff:0a:d5:51:2f:f0:6d:ba:e7:ca:4d: 36:97:78:a3:e3:e7:61:70:83:7c:7d:52:d4:7e:2e: 3a:4d:cd:9d:93:a4:bf:49:54:fc:3a:b0:30:c6:32: da:56:26:84:17:db:1a:b1:79:e1:6e:12:9c:ab:b4: 91:74:e1:88:75:6e:c1:fc:d0:07:a3:4a:98:f6:50: 99:f7:e3:40:e8:c6:73:92:c7:3a:3f:8e:25:db:db: 35:d9:d8:00:ae:be:c1:d0:07:7f:66:99:8d:ac:03: 1f:32:6d:52:05:f3:0f:ad:e1:a5:de:e3:43:fb:3f: de:6e:9d:47:a9:94:7a:ec:4b:21:7c:c5:6b:7b:db: a1:bc:9c:b5:14:1e:8d:f7:67:e5:eb:21:54:0e:a4: 02:dc:dd:96:95:f1:7b:4b:4c:bd:b3:8c:a0:e0:e2: d0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:D9:BE:D1:79:77:52:09:6F:B5:7F:CD:1E:4A:E0:60:B6:47:D1:21 X509v3 Authority Key Identifier: keyid:2A:48:9E:93:DC:BD:87:0E:9C:21:49:BC:A3:41:89:FB:4A:95:AC:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/udm-0Xl3UglvtX_NHkrgYLZH0SE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/19/830516-de7e-4f18-8494-47054cc4e157/1/Kkiek9y9hw6cIUm8o0GJ-0qVrAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2a0a:8180:c8c4::/48 2a0a:8182:2a54::/48 2a0a:8184:cc3c::/48 2a0a:8186:85fa::/48 Signature Algorithm: sha256WithRSAEncryption 60:06:fa:c9:05:1c:54:d2:8e:6b:40:e0:e5:e1:f4:be:d0:89: a4:d6:50:5a:02:d2:7f:17:a5:b7:8d:31:75:05:74:cc:51:ee: 4f:b9:08:2a:14:15:b4:c3:9b:82:34:fd:dc:67:34:c4:a8:70: 97:79:d9:1b:50:4c:2c:27:e6:60:43:0c:9b:0e:16:51:1b:7f: c9:da:7d:6e:5b:27:3f:95:4d:1b:5f:60:88:13:ed:47:6d:04: 63:03:ea:b6:cf:86:40:07:03:45:fb:2a:c0:78:6d:71:ad:ea: 5f:d1:c7:73:c8:ee:77:90:07:5d:1e:1b:5b:d6:31:78:77:96: 9b:e7:e7:47:49:46:83:45:e0:42:9f:b7:4a:d0:93:60:c1:7d: 4f:3c:13:b4:a0:cd:05:8b:09:f4:e5:b0:ca:15:43:09:49:49: 47:77:86:b6:cc:64:a9:da:29:18:58:d8:56:b0:54:48:5e:c1: f5:ef:10:40:12:5c:00:54:d3:b7:a5:3d:a6:f0:3a:e0:ce:f1: ba:86:f7:e3:a5:ed:df:f8:d6:d5:8d:f8:ee:e1:6a:6a:e0:0a: 1a:85:ed:d4:af:23:f8:e2:44:da:b3:d4:0a:77:38:dd:68:33: a5:40:23:a4:28:ea:4b:ff:29:c4:ae:d3:85:d5:55:53:25:ea: 0e:1f:7f:de -----BEGIN CERTIFICATE----- MIIFGzCCBAOgAwIBAgISAZwlCstLLxXlQNZetgsEQ24EMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJhNDg5ZTkzZGNiZDg3MGU5YzIxNDliY2EzNDE4OWZiNGE5 NWFjMDMwHhcNMjYwMjAzMTk0NjMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhiOWQ5YmVkMTc5Nzc1MjA5NmZiNTdmY2QxZTRhZTA2MGI2NDdkMTIxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplek+VHVyvc4EHItmR4rBlPt3aCh /lJQJbCa0G5ooTFFqdy7xjvBfVrWuxI6I4cbXr5mBcjJkKLxh+0eiVMa4NvHKNF+ F6CRUMVk3vB3PfXgYnhKPdvryOK5jV5J/wrVUS/wbbrnyk02l3ij4+dhcIN8fVLU fi46Tc2dk6S/SVT8OrAwxjLaViaEF9sasXnhbhKcq7SRdOGIdW7B/NAHo0qY9lCZ 9+NA6MZzksc6P44l29s12dgArr7B0Ad/ZpmNrAMfMm1SBfMPreGl3uND+z/ebp1H qZR67EshfMVre9uhvJy1FB6N92fl6yFUDqQC3N2WlfF7S0y9s4yg4OLQUQIDAQAB o4ICJzCCAiMwHQYDVR0OBBYEFLnZvtF5d1IJb7V/zR5K4GC2R9EhMB8GA1UdIwQY MBaAFCpInpPcvYcOnCFJvKNBiftKlawDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2tpZWs5eTlodzZjSVVtOG8wR0otMHFWckFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS84MzA1MTYtZGU3ZS00ZjE4LTg0OTQt NDcwNTRjYzRlMTU3LzEvdWRtLTBYbDNVZ2x2dFhfTkhrcmdZTFpIMFNFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xOS84MzA1MTYtZGU3ZS00ZjE4LTg0OTQtNDcwNTRjYzRlMTU3 LzEvS2tpZWs5eTlodzZjSVVtOG8wR0otMHFWckFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAAjAkAwcAKgqBgMjE AwcAKgqBgipUAwcAKgqBhMw8AwcAKgqBhoX6MA0GCSqGSIb3DQEBCwUAA4IBAQBg BvrJBRxU0o5rQODl4fS+0Imk1lBaAtJ/F6W3jTF1BXTMUe5PuQgqFBW0w5uCNP3c ZzTEqHCXedkbUEwsJ+ZgQwybDhZRG3/J2n1uWyc/lU0bX2CIE+1HbQRjA+q2z4ZA BwNF+yrAeG1xrepf0cdzyO53kAddHhtb1jF4d5ab5+dHSUaDReBCn7dK0JNgwX1P PBO0oM0Fiwn05bDKFUMJSUlHd4a2zGSp2ikYWNhWsFRIXsH17xBAElwAVNO3pT2m 8DrgzvG6hvfjpe3f+NbVjfju4Wpq4Aoahe3UryP44kTas9QKdzjdaDOlQCOkKOpL /ynErtOF1VVTJeoOH3/e -----END CERTIFICATE-----Generated at Mon Feb 9 19:40:09 2026 by rpki-client